diff --git a/bin/executable_docker-credential-gopass b/bin/executable_docker-credential-gopass
new file mode 100644
index 0000000..3a56ffa
--- /dev/null
+++ b/bin/executable_docker-credential-gopass
@@ -0,0 +1,36 @@
+#!/bin/zsh
+
+set -e
+
+trap 'echo {} ; exit 0' ERR
+
+add() {
+        gopass insert -f docker/$serverurl <<END
+$secret
+login: $login
+END
+}
+
+case $1 in
+    get)
+        read serverurl || true
+        [[ -n $serverurl ]]
+        pass="$(gopass show --password docker/$serverurl)"
+        login="$(gopass show --password docker/$serverurl login)"
+        jo serverurl=dhub.corp.metrans.cz username=$login secret=$pass
+        exit ;;
+    store)
+        jq '.username+"|"+.secret+"|"+.serverurl' | IFS='|' read login secret serverurl
+        add
+        exit ;;
+    erase)
+        read serverurl
+        [[ -z $serverurl ]] && exit 1
+        gopass delete -f docker/$serverurl
+        exit ;;
+    list)
+        gopass ls --flat -s docker | jq -R | jq -s
+        exit ;;
+esac
+
+echo "get|list|store|erase"
diff --git a/dot_config/containers/auth.json b/dot_config/containers/auth.json
new file mode 100644
index 0000000..767597c
--- /dev/null
+++ b/dot_config/containers/auth.json
@@ -0,0 +1,5 @@
+{
+  "credHelpers": {
+    "dhub.corp.metrans.cz": "gopass"
+  }
+}